Amazon Linux 2023 : python3-jwt, python3-jwt+crypto (ALAS2023-2026-2051)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2051 advisory. PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient passes its uri argument directly to urllib.request.urlopen which uses Python stdlib's default OpenerDirector...

SUSE SLES12: java-1_8_0-openjdk / java-1_8_0-openjdk-demo / etc (SUSE-SU-2026:3622-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3622-1 advisory. - CVE-2026-41254: lcms2: Information disclosure or denial of service via integer overflow in CubeSize bsc1272459. - CVE-2026-46968: unauthorize...

Linux Distros Unpatched Vulnerability : CVE-2026-74259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cifs: remove all cifs files before kill super Cifs files may be put into fileinfoputwq during umounting cifs. After umount done, cifsFileInfoputfinal is called,...

Linux Distros Unpatched Vulnerability : CVE-2026-72079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: ims-pcu - fix use-after-free and double-free in disconnect imspcudisconnect only intended to perform cleanup when the primary control interface is unboun...

Linux Distros Unpatched Vulnerability : CVE-2026-74329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchdog: unregister PM notifier on watchdog unregister watchdogregisterdevice registers wdd-pmnb when WDOGNOPINGONSUSPEND is set, but watchdogunregisterdevice...

Linux Distros Unpatched Vulnerability : CVE-2026-72349

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: xtrateest: fix u64 truncation in xtrateestmt On links faster than 34 Gbps, where byte rate may exceed 2^32-1 4.3 GBps, the comparison result becomes...

Linux Distros Unpatched Vulnerability : CVE-2026-74371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: fix BPFPROGQUERY OOB write and cgroup backward compat BPFPROGQUERY writes back the 'query.revision' field unconditionally to userspace. If userspace passes...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101962)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101962 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/mbcache: cancel shrink work before destroying the cache mbcachedestroy calls shrinkerfree and...

Linux Distros Unpatched Vulnerability : CVE-2026-74297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/mlx5: Fix undefined shift of user RQ WQE size setrqsize computes the RQ WQE size as 1 rqwqeshift based on the user-provided rqwqeshift, which is only check...

MiracleLinux 9 : nodejs:24 (AXSA:2026-1559:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1559:01 advisory. brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malformed...

Linux Distros Unpatched Vulnerability : CVE-2026-72345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: LAG, Fix off-by-one in single-FDB error rollback On failure at index i, the reverse cleanup loop in mlx5lagcreatesinglefdb starts from i, so the faile...

Linux Distros Unpatched Vulnerability : CVE-2026-72306

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vduse: Fix race in vdusedevmsgsync and vdusedevreaditer There is one race case in vdusedevmsgsync and vdusedevreaditer: vdusedevreaditer: lockmsglock...

Linux Distros Unpatched Vulnerability : CVE-2026-72132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFS: Charge unstable writes by request size, not folio size nfsfoliomarkunstable and nfsfolioclearcommit charge and uncharge NRWRITEBACK/WBWRITEBACK by...

Amazon Linux 2023 : python3-idna (ALAS2023-2026-2052)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2052 advisory. Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and Unicode IDNA Compatibility Processing. In versions prior to...

Fedora 43 : linux-firmware (2026-e82e06fcae)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e82e06fcae advisory. Update to 20260810: amdgpu: numerous firmware updates update firmware for MT7922 WiFi device morsemicro: add firmware for mm8108 support ath10k: WCN3990 hw1....

Linux Distros Unpatched Vulnerability : CVE-2026-72196

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: bound copylcns dp-pagelcns index in analysis pass In logreplay's analysis pass, after finddp returns a valid DIRPAGEENTRY for the targetattr, targetv...

Oracle Linux 10 : nodejs22 (ELSA-2026-55541)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55541 advisory. - Fix for CVE-2026-69152 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Fix CVE-2026-13149 npm/brace-expansion - Fix for CVE-2026-59873 and...

Linux Distros Unpatched Vulnerability : CVE-2026-72164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: avoid moving extents to occupied clusters For non-auto OCFS2IOCMOVEEXT operations, userspace supplies a physical megoal. ocfs2moveextent initializes...

Linux Distros Unpatched Vulnerability : CVE-2026-72250

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntrackreasm: guard macheader adjustment after IPv6 defrag nfctfrag6reasm slides the packet head forward to drop the IPv6 fragment header and th...

Linux Distros Unpatched Vulnerability : CVE-2026-72163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix NULL htransaction deref in ocfs2assuretranscredits BUG A direct write over unwritten extents can panic the kernel in ocfs2assuretranscredits when the...

Linux Distros Unpatched Vulnerability : CVE-2026-72143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: ISST: Restore SST-PP control to all domains The SST-PP control offset is only restored to power domain 0 after resume. During suspend, control...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101978)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101978 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: guard against EA inode refcount underflow in xattr update syzkaller found a path where...

Linux Distros Unpatched Vulnerability : CVE-2026-68478

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - memstick: msblock: reject a card that reports too many blocks msbftlinitialize computes the zone count from the card block count with no bound: msb-zonecount =...

Linux Distros Unpatched Vulnerability : CVE-2026-72226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: tt: prevent TVLV OOB check overflow A TT unicast TVLV contains the number of VLANs stored in it. This number is an u16 and gets multiplied by the si...

Linux Distros Unpatched Vulnerability : CVE-2026-72328

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Fix potential amdxdnaumap lifetime race amdxdnaumaprelease calls the blocking mmuintervalnotifierremove before removing the object from...

Linux Distros Unpatched Vulnerability : CVE-2026-72295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Validate irqchip index in irqfd routing Sashiko reported that the irqchip...

Linux Distros Unpatched Vulnerability : CVE-2026-68461

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - device property: initialize the remaining fields of fwnodehandle in fwnodeinit If a firmware node is allocated on the stack for instance: temporary software nod...

Linux Distros Unpatched Vulnerability : CVE-2026-72348

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop The ah, hbh and rt matches check that the fixed extension header is present, then use th...

Amazon Linux 2 : gimp, --advisory ALAS2GIMP-2026-017 (ALASGIMP-2026-017)

The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2GIMP-2026-017 advisory. A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability in the FITS image loader by...

Linux Distros Unpatched Vulnerability : CVE-2026-72502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: ipv6: clamp default adverting MSS to avoid GSOBYFRAGS 0xFFFF When MTU is large, ip6defaultadvmss can return IPV6MAXPLEN 65535. This is interpreted by TCP a...

Linux Distros Unpatched Vulnerability : CVE-2026-72476

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: Fix possible use after free In dmareleasechannel, check chan-device-privatecnt after call dmachanput. However, dmachanput call dmadeviceput which cou...

Linux Distros Unpatched Vulnerability : CVE-2026-72232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - batman-adv: ensure minimal ethernet header on TX As documented in commit 8bd67ebb50c0 net: bridge: xmit: make sure we have at least eth header len bytes, it is...

Linux Distros Unpatched Vulnerability : CVE-2026-74322

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996macwritetxwi80211 For injected frames e.g. via radiotap, mac80211 can pass info-control.vif =...

Linux Distros Unpatched Vulnerability : CVE-2026-72055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ip6vti: require CAPNETADMIN in the device netns for changelink vti6changelink operates on at most two netns, devnetdev and the tunnel link netns t-net. The...

RHEL 9 : kpatch-patch-5_14_0-687_10_1 (RHSA-2026:55763)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:55763 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...

Linux Distros Unpatched Vulnerability : CVE-2026-72013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: Prevent NULL pointer dereference in machinekexecprepare A NULL pointer dereference issue is noticed in riscv's machinekexecprepare, where...

Linux Distros Unpatched Vulnerability : CVE-2026-74316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: Handle layout stid in nfsd4droprevokedstid nfsd4droprevokedstid has no SCTYPELAYOUT case, so when a client sends FREESTATEID for an admin-revoked layout...

Linux Distros Unpatched Vulnerability : CVE-2026-72433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftmetabridge: fix NFTMETABRIIIFPVID stack leak This needs to test for nonzero retval. CVE-2026-72433 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-74353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: always resumeall after suspendall Need to restore any good queues even if the suspendall failed for some. Always run removequeue as that will schedu...

Linux Distros Unpatched Vulnerability : CVE-2026-74360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject exclusive maps for bpfmapelem iterators Exclusive maps aka exclproghash are meant to be reachable only from the single program whose hash matches...

Oracle Linux 9 : unbound (ELSA-2026-55841)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55841 advisory. 1.24.2-3.4 - Fix CVE-2026-55973 RHEL-212809 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. No...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102132)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102132 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on new expectations Use the existing master conntrac...

Linux Distros Unpatched Vulnerability : CVE-2026-72139

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: defer md5siginfo kfree past RCU grace period in tcpconnect The md5+ao reconciliation in tcpconnect net/ipv4/tcpoutput.c has two symmetric branches: if...

Mozilla Firefox ESR < 115.39

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.39. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-75 advisory. - Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox...

Linux Distros Unpatched Vulnerability : CVE-2026-72183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - landlock: Fix LANDLOCKSCOPESIGNAL bypass on the SIGIO path LANDLOCKSCOPESIGNAL must prevent a sandboxed process from signaling processes outside its Landlock...

Linux Distros Unpatched Vulnerability : CVE-2026-72212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/memoryhotplug: fix incorrect altmap passing in error path In createaltmapsandmemoryblocks, when archaddmemory succeeds with memmaponmemory enabled, the vmemm...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101967)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101967 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drmparsetiledblock drmparsetiledblock casts the DisplayID block to a...

Linux Distros Unpatched Vulnerability : CVE-2026-72424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtc: msc313: fix NULL deref in shared IRQ handler at probe msc313rtcprobe calls devmrequestirq with IRQFSHARED and &pdev-dev as the cookie, but platformsetdrvda...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101980)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101980 advisory. In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix acpinfitinit error cleanup If acpinfitinit fails after adding the acpidesc...

Linux Distros Unpatched Vulnerability : CVE-2026-72422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix use-after-free of conn-preauthinfo in concurrent SMB2 NEGOTIATE conn-preauthinfo is shared connection state struct preauthintegrityinfo, kmalloc-96...